8

Password strength

  • Live

V
Vilmantas Rekašius

Passwords that contain username, user or domain should not be allowed to be used. For example e-mail: alex.ander@thegreat.tld should not accept password "alexander2020" "thegreatalex" or similar which contains fragments of the user/domain part of the username and can be guessed easily. The same goes for other DA passwords, not only E-mail.

A

Activity Newest / Oldest

V

Vilmantas Rekašius

The enforce_difficult_passwords affects upper/lowercase, minimum, recommended and special password symbols, but not a match between username and password related to it, as mentioned in my example.


Avatar

smtalk

Status changed to: Live

Avatar

smtalk

Just execute the following to enforce difficult passwords:
/usr/local/directadmin/directadmin set enforce_difficult_passwords 1
service directadmin restart